Core concept
Client kinit → obtain TGT → service tickets. Cross-realm trust for multi-domain.
Advertisement
How it works
Ticket expiry issues in long jobs. Delegation tokens complicate. Time sync critical.
Advertisement
Trade-offs + gotchas
Any secure Hadoop cluster. Regulatory requirement often.